nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
 ·AT&T U-Verse
 ·AT&T Midwest
| reply to Cronk
Re: MS root certificates update
Is it generally considered ok to accept Microsoft's evaluation of CA's? Personally, I'm a critic of the whole system. But, practically speaking, you don't have much choice other than to accept them.
You do have the option to mark individual root certificates untrusted. In practice you would probably only do that if you come across a reason to distrust a particular CA.
is there any value in checking the certificate if there has not been any alert that popped up? Probably not, unless you have specific reason for concern. The main time you would inspect a certificate is if there was a warning and you are trying to decide whether it is safe to ignore the warning.
--
AT&T dsl; Westell 2200 modem/router; SuSE 10.1; firefox 2.0.0.5 |
|
Cronk
join:2005-07-16
Denver, CO
| Thanks for the replies.
said by nwrickert  :is there any value in checking the certificate if there has not been any alert that popped up? Probably not, unless you have specific reason for concern. The main time you would inspect a certificate is if there was a warning and you are trying to decide whether it is safe to ignore the warning. I've noticed the option when viewing a certificate to install it. Seems like to only reason to install it would be because an alert comes up, and you've decided to trust it and want to eliminate future alerts? Would that be correct?
Thanks |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest
| That's the usual reason.
I would suggest you avoid haste. Sometimes a certificate warning comes up because the server is misconfigured. The best way of correcting that is for the server admin to fix the broken configuration.
If it is a server you are using regularly, such as your designated email server, then maybe add the certificate. If it is a server you visit infrequently, I would hesitate before adding it.
--
AT&T dsl; Westell 2200 modem/router; SuSE 10.1; firefox 2.0.0.5 |
|
Cronk
join:2005-07-16
Denver, CO | OK.
Thanks again for the information. |
|
